Conditions

Type

Match criteria

Values

Example

Logical Operator

IP

• Matches or falls within the range
• Mismatches or lies outside the range
• IP belongs to the region
• IP does not belong to the region

• IP address
• CIDR
• Address range
• Two-letter country code as per ISO 3166-1 alpha-2

• 1.2.33.44
• 2001:0db8:85a3:0000:0000:8a2e:0370:7334
• 10::1234:1abc:1/64
• 1.2.0.0-1.2.1.1
• ru
• kz

or

HTTP header

• Matches
• Mismatches
• Starts with
• Does not start with
• Matches regular expression
• Mismatches regular expression

Format key: value, where key is the HTTP header,
value is a specific header value, value
prefix or regular expression of the PIRE library

• User-Agent: curl/7.55.1

and

Request URI

• Matches
• Mismatches
• Starts with
• Does not start with
• Matches regular expression
• Mismatches regular expression

Request path, beginning of request path, or regular
expression of PIRE library

• /

Not used

Query Match

• Matches
• Mismatches
• Starts with
• Does not start with
• Matches regular expression
• Mismatches regular expression

Format key: value, where key is the request
parameter, value is a specific parameter value,
value prefix, or regular expression of the
PIRE library

• a: 1
• A: 2

and

Host

• Matches
• Mismatches
• Starts with
• Does not start with
• Matches regular expression
• Mismatches regular expression

Values of the Host header for HTTP/1.1 or
the authority pseudoheader for HTTP/2 by which a virtual
host, value prefix, or PIRE library
regular expression is selected

• example.com

or

HTTP method

• Matches
• Mismatches
• Starts with
• Does not start with
• Matches regular expression
• Mismatches regular expression

HTTP request method in the upper case,
with an arbitrary value, value prefix, or PIRE library
regular expression allowed

• GET
• POST
• DELETE

or

Cookie

• Matches
• Mismatches
• Starts with
• Does not start with
• Matches regular expression
• Mismatches regular expression

Formatkey: value, where key is the Cookie header, value is the specific Cookie value, value prefix, or regular expression of the PIRE library

• csrftoken=u32t4o3tb

and

HTTP body

• Matches
• Mismatches
• Starts with
• Does not start with
• Matches regular expression
• Mismatches regular expression

String in the HTTP packet body or PIRE library regular expression

• <br><input type='submit'>

or